3Com MSR 50 Series Configuration Manual page 1912

1912 C 101: IKE C
HAPTER ONFIGURATION
<RouterB> system-view
[RouterB] ike local-name routerb
# Configure an ACL.
[RouterB] acl number 3101 match-order auto
[RouterB-acl-adv-3101] rule permit ip source any destination any
[RouterB-acl-adv-3101] quit
# Configure an IKE peer.
[RouterB] ike peer peer
[RouterB-ike-peer-peer] exchange-mode aggressive
[RouterB-ike-peer-peer] pre-shared-key abc
[RouterB-ike-peer-peer] id-type name
[RouterB-ike-peer-peer] remote-name routera
[RouterB-ike-peer-peer] remote-ip 10.0.0.1
[RouterB-ike-peer-peer] nat traversal
[RouterB-ike-peer-peer] quit
# Create an IPSec proposal named prop.
[RouterB] ipsec proposal prop
[RouterB-ipsec-proposal-prop] encapsulation-mode tunnel
[RouterB-ipsec-proposal-prop] transform esp
[RouterB-ipsec-proposal-prop] esp encryption-algorithm des
[RouterB-ipsec-proposal-prop] esp authentication-algorithm sha1
[RouterB-ipsec-proposal-prop] quit
# Create an IPSec policy, specifying to set up SAs through IKE negotiation.
[RouterB] ipsec policy policy 10 isakmp
# Configure the IPSec policy to reference the IKE peer.
[RouterB-ipsec-policy-isakmp-policy-10] ike-peer peer
# Configure the IPSec policy to reference ACL 3101.
[RouterB-ipsec-policy-isakmp-policy-10] security acl 3101
# Configure the IPSec policy to reference IPSec proposal prop.
[RouterB-ipsec-policy-isakmp-policy-10] proposal prop
[RouterB-ipsec-policy-isakmp-policy-10] quit
# Configure dynamic IP address negotiation for interface Serial 2/0.
[RouterB] interface serial 2/0
[RouterB-Serial2/0] ip address ppp-negotiate
# Apply the IPSec policy group to interface Serial 2/0.
[RouterB-Serial2/0] ipsec policy policy
n
For detailed information of IP address negotiation through PPP, refer to "PPP and
MP Configuration" on page 363.